Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File:                     tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier:          /xcPeGlJ2WRMmwU79wD2GYhNxL8cpAx3IkifjjtseYo=
Subject key identifier:   2B:23:32:D5:7A:CE:59:22:85:09:3F:3C:F2:AF:D3:11:47:82:44:12
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer:       /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial:       01962E98B492403E55968D14C313281CDC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number:          1476
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: Q0lBmzM8/j661C30p8gM6Laqh25nQ58Nw/BWC8OoMcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b4:92:40:3e:55:96:8d:14:c3:13:28:1c:dc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=2b2332d57ace592285093f3cf2afd31147824412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:fc:cd:27:60:c3:12:14:da:a3:ee:a2:3c:
                    b0:de:0f:40:d9:96:6e:7b:58:19:c5:da:3c:eb:d2:
                    a5:9d:e0:bd:6d:58:15:a4:f9:77:54:9a:93:4c:28:
                    99:8a:ba:d4:78:38:18:55:01:fc:df:c6:88:a9:a8:
                    02:ae:4a:17:dc:36:54:3e:8b:77:7b:44:ea:a9:aa:
                    c7:05:3f:1c:43:f4:49:e5:92:99:13:11:a0:cb:81:
                    5e:c0:b2:f3:89:81:51:ee:4c:e9:bc:ce:de:99:a5:
                    b9:74:24:1d:a1:1a:81:a4:1c:d3:cd:2d:cb:1c:6b:
                    ed:aa:6b:38:7c:27:a0:28:84:6a:5e:a7:8b:e1:35:
                    f3:43:c7:69:ae:d8:dc:db:ac:a7:90:1a:a3:33:1e:
                    03:f1:82:18:f1:09:42:7f:6d:98:8f:37:37:bc:d5:
                    79:0f:0b:23:56:05:46:1e:29:35:01:a8:73:74:33:
                    b7:47:42:63:f3:01:f0:fd:d6:12:6e:e3:d4:cd:cc:
                    21:bb:4d:05:23:a2:61:d6:30:8d:e6:b1:21:75:b6:
                    7b:4c:d2:74:4f:72:5b:27:29:7c:2c:7a:9a:76:16:
                    b5:81:86:68:b7:45:13:16:04:59:1f:5b:f8:14:b8:
                    5b:0d:2c:86:70:30:b6:4d:ae:06:40:ec:d3:de:33:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:23:32:D5:7A:CE:59:22:85:09:3F:3C:F2:AF:D3:11:47:82:44:12
            X509v3 Authority Key Identifier:
                keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:4d:76:6d:ef:45:64:85:b3:c4:45:6f:d6:03:d1:7d:28:
         77:ea:ec:d7:56:a6:bb:45:24:9d:ba:e8:7c:ac:5f:79:ec:90:
         d5:92:df:69:05:6c:31:09:5b:f2:ab:13:61:12:70:e0:b2:10:
         ed:d5:59:34:73:e9:34:16:98:e6:2c:d4:ee:2f:1b:09:6d:50:
         cc:6b:40:bd:8f:62:03:46:8d:41:95:a1:fd:87:f6:43:ef:3c:
         70:bc:b7:6f:a6:d4:52:d0:da:20:cb:ba:f5:be:9c:2c:9c:e2:
         6f:e8:7a:c0:67:b3:9c:c5:f3:12:9f:2c:27:62:62:c7:0c:51:
         85:1f:7d:05:0b:e7:7a:bf:34:5b:e1:30:d9:6f:7a:62:50:d0:
         0b:ec:2a:b5:74:a2:ca:6c:ae:9a:aa:91:28:e6:b6:db:57:c7:
         7b:32:a0:31:db:2c:e8:a5:25:a2:29:99:ed:23:19:1e:2f:14:
         1a:7e:02:dc:68:30:e5:f2:ab:9d:0e:40:d6:ac:a8:03:c9:e8:
         42:b6:3f:58:13:5d:66:cb:a9:98:79:a3:32:39:26:96:14:dc:
         29:c3:2b:8a:94:c4:46:91:cf:d1:6a:ff:24:93:eb:77:0e:02:
         c6:a2:f8:1a:dd:f8:77:d6:ea:58:f1:c0:b1:d7:12:69:34:6f:
         7c:17:ae:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLSSQD5Vlo0UwxMoHNyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl
OGIyOWQwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
EygyYjIzMzJkNTdhY2U1OTIyODUwOTNmM2NmMmFmZDMxMTQ3ODI0NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQb8zSdgwxIU2qPuojyw3g9A2ZZu
e1gZxdo869KlneC9bVgVpPl3VJqTTCiZirrUeDgYVQH838aIqagCrkoX3DZUPot3
e0TqqarHBT8cQ/RJ5ZKZExGgy4FewLLziYFR7kzpvM7emaW5dCQdoRqBpBzTzS3L
HGvtqms4fCegKIRqXqeL4TXzQ8dprtjc26ynkBqjMx4D8YIY8QlCf22Yjzc3vNV5
DwsjVgVGHik1AahzdDO3R0Jj8wHw/dYSbuPUzcwhu00FI6Jh1jCN5rEhdbZ7TNJ0
T3JbJyl8LHqadha1gYZot0UTFgRZH1v4FLhbDSyGcDC2Ta4GQOzT3jM+JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsjMtV6zlkihQk/PPKv0xFHgkQSMB8GA1UdIwQY
MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt
YTEwNTZmNTg5MzU0LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0
LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7ZNdm3v
RWSFs8RFb9YD0X0od+rs11amu0UknbrofKxfeeyQ1ZLfaQVsMQlb8qsTYRJw4LIQ
7dVZNHPpNBaY5izU7i8bCW1QzGtAvY9iA0aNQZWh/Yf2Q+88cLy3b6bUUtDaIMu6
9b6cLJzib+h6wGeznMXzEp8sJ2JixwxRhR99BQvner80W+Ew2W96YlDQC+wqtXSi
ymyumqqRKOa221fHezKgMdss6KUloimZ7SMZHi8UGn4C3Ggw5fKrnQ5A1qyoA8no
QrY/WBNdZsupmHmjMjkmlhTcKcMripTERpHP0Wr/JJPrdw4CxqL4Gt34d9bqWPHA
sdcSaTRvfBeung==
-----END CERTIFICATE-----